I ran into this when I installed 8.5.
I think you need to download the McAfee Installation Designer (MID) for VirusScan 8.7. Using MID, you can create a customized VirusScan installation package with the unwanted programs policy configured how you like it (perhaps disabled?).
Then I think you check your customized package into ePol.
Then when your customized package installs, the initial settings will match what you selected in MID until the Agent checks in and grabs your assigned Policies.
It was a little bit of a hassle. Thanks for reminding me though.. I'm getting ready to roll VS8.7 out to my company and would have been bitten by this problem again if you didn't remind me.